1. Who we are
BaoBuzz Africa is a product of FroNet Inc., RC 7157939, 33, Maplewood Estate, Oko-Oba, Agege, Lagos State, Nigeria. FroNet Inc. is the "data controller" for personal data collected through this website, which means we decide how and why your data is used.
This policy is written to follow the Nigeria Data Protection Act 2023 ("NDPA") and the guidance of the Nigeria Data Protection Commission ("NDPC"). In this policy, "we", "us" and "our" mean FroNet Inc. trading as BaoBuzz Africa.
2. What we collect
- Campaign brief answers. What you tell Bo, our chat assistant: your goals, audience, budget ideas, timing and anything else you type.
- Business details. Business name, industry, and what you sell.
- Contact details. Your name, email address and phone number.
- Places and streets. Locations, states, routes or areas where you want your ads to be seen.
- Messages. Anything you send through the contact form or by email.
- Sign-in email. The email address you use to sign in to your dashboard (we use a one-time magic link, so there is no password).
- Dashboard usage. Which campaigns you view and when you sign in.
- Basic technical data. Things your browser sends automatically, such as IP address, device and browser type, and pages requested. We use this to keep the site working and secure.
Please do not put sensitive personal data (such as health, religion or government ID numbers) into the chat or forms. We do not need it.
3. Why we use your data, and our lawful basis
| Purpose | Lawful basis under the NDPA |
|---|---|
| Turn your brief into a campaign plan and estimate; review your request; send your campaign order, invoice and dashboard link | To take steps at your request before a contract, and to perform a contract |
| Answer your messages and calls | Our legitimate interests in running the business and replying to you |
| Report campaign performance in your dashboard | Performance of our contract with you |
| Keep the site safe, prevent abuse and fix problems | Legitimate interests |
| Keep invoices and records, and respond to legal requests | Legal obligation |
| Use of AI to structure your brief (see section 4) | Contract steps at your request; your consent where you choose to share optional details |
Where we rely on consent, you can withdraw it at any time (see section 9). We do not send marketing emails unless you ask for them.
4. AI processing
Bo uses artificial intelligence to read your brief and turn it into a structured campaign plan. To do this, the text of your brief is sent to a third-party AI provider, such as Google (Gemini), Anthropic or OpenAI. These providers process the text only to return a result to us. A person on our team reviews every plan before anything is agreed with you. No automated decision is made about you that has a legal or similarly significant effect without human review.
We do not sell your data and we do not allow our AI providers to use your brief to advertise to you.
5. Who else handles your data
We use trusted service providers ("processors") who handle data on our instructions:
- Supabase: database and sign-in.
- Vercel: website hosting.
- Resend: sending emails (requests, orders, invoices, sign-in links).
- AI providers (for example Google Gemini, Anthropic, OpenAI): structuring your brief.
We may also share data with professional advisers, printers and wrapping partners where needed to deliver your campaign (for example, your business name and ad artwork, not your personal contact details unless required), and with authorities when the law requires it.
6. International transfers
Some of the providers above store or process data outside Nigeria. When we transfer personal data abroad, we do so only where the NDPA allows it, for example where the country or provider gives adequate protection, or we have suitable contract terms in place.
7. How long we keep data
- Campaign requests and orders: for the life of the campaign and up to 6 years afterwards for accounting and legal reasons.
- Requests that never become a campaign: up to 24 months, then deleted or anonymised.
- Contact form messages: up to 24 months.
- Technical logs: normally 90 days or less.
We delete or anonymise data sooner when you ask us to and the law allows.
8. Security
We use sensible technical and organisational measures: encrypted connections (HTTPS), access controls for staff, row-level security in our database, and passwordless sign-in. No system is perfectly secure. If a breach puts your rights at serious risk, we will tell you and the NDPC within the time the NDPA requires (72 hours for the NDPC).
9. Your rights
Under the NDPA you have the right to:
- be told how your data is used (this policy);
- access the personal data we hold about you;
- have wrong or incomplete data corrected (rectification);
- ask us to erase your data, where we have no good reason to keep it;
- ask us to restrict how we use your data;
- object to processing based on our legitimate interests, or to direct marketing;
- receive your data in a common, portable format and ask us to send it to another provider;
- withdraw your consent at any time, without affecting what we did before you withdrew;
- not be subject to a decision made only by automated means that significantly affects you; and
- complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
To use any of these rights, email hello.baobuzz@gmail.com. We may need to confirm who you are first. We aim to reply within one month. We would appreciate the chance to fix a problem before you complain to the NDPC, but you are free to go to them at any time.
10. Cookies
We only use essential cookies: the ones that keep you signed in to your dashboard and keep the site secure. We do not use advertising or tracking cookies at present. If that changes, we will update this policy and ask for your consent where needed. Your browser lets you block or delete cookies, but sign-in may stop working if you do.
11. Children
Our services are for businesses and adults. They are not for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us data, tell us and we will delete it.
12. Third-party links
Our site links to other sites, such as LinkedIn and X. Their privacy practices are their own, so please read their policies.
13. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows the latest version. If a change is important, we will tell you by email or on the site.
Contact us
BaoBuzz Africa is a product of FroNet Inc., RC 7157939, 33, Maplewood Estate, Oko-Oba, Agege, Lagos State, Nigeria.
Email: hello.baobuzz@gmail.com
See also: Privacy Policy · Terms and Conditions · Disclaimer